Last updated 30 September 2026
This covers pointsuser.com and the PointsUser iPhone app. They are the same service and store the same things, except where a section says otherwise.
Your email address and name from sign-in, whether you use email, Google or Apple. If you use Sign in with Apple and choose to hide your email, we only ever see Apple's relay address.
What you tell us: your home city and airport, the cards and programmes you hold, balances you enter by hand, card credits you mark as used, redemptions you log, a trip you commit to, fare watches, and your answers to the travel profile questions.
If you connect accounts, what AwardWallet shares on your behalf: programme names, balances, elite status, expiry dates, and account numbers with most digits hidden. We never see or store your loyalty-programme passwords; AwardWallet holds those under its own privacy policy.
A note of what you open on the site, such as deals, hotels, destinations and editions, so we can put what you care about nearer the top. You can switch this off in Settings → What we notice, download it there, and every entry is deleted after 400 days.
The city your connection comes from, as a single city name that is replaced each time, so we can notice when you are travelling. Never a history of places.
Only when you press “Show restaurants near me” or “Show lounges near me” (or tell the concierge where you are) do we use your exact position. It is sent once to find places near you, including to Google, and then discarded. We don't store it, log it, or keep a history of where you've been. The iPhone app asks for location only while you are using it, never in the background.
Face ID. The app can lock itself with Face ID or your passcode. That check happens entirely on your phone through Apple; we never receive your face data or passcode.
Widget and offline copy. So the home-screen widget and the app work without a signal, the app keeps a small copy of your totals, balances and upcoming dates on your phone, along with a key that only lets the widget read those numbers. Signing out removes both from the phone, and deleting your account makes the key useless.
Share to PointsUser. When you share a web page to PointsUser, only the site's name (such as marriott.com) is sent to us, to show what you hold with that programme. The full page address stays on your phone, and the site name isn't kept.
Notifications. If you allow them, we store your device's notification address so alerts reach you. Turning notifications off deletes it.
No location history, no card numbers, no payment details, no loyalty passwords. We don't sell your data or share it with advertisers, and there is no advertising or tracking code in the site or the app.
Alert emails and the weekly Travel Point email are opt-in and every one carries a one-click unsubscribe link. Turning them off never affects your account.
Google Firebase (sign-in, database and notifications), Vercel (hosting and cookie-free visit counts), Resend (email delivery), AwardWallet (balance sharing, only if you connect), Google Maps Platform (nearby restaurants and lounges, only when you ask), Stripe (Premium payments on the website; we keep only a customer reference, never card details) and Apple (Sign in with Apple and Face ID, if you use them). Destination photos load from Wikimedia Commons and Unsplash.
If you connect your own Claude on the Ask page, your questions go to Anthropic under your own Claude account, not ours. We store only a scrambled copy of the key you create, and you can revoke it there.
Some card links earn us a commission. When you tap one we note which card and which page it was on, and we say so on every screen that has one.
Go to Settings → Delete your account, on the website or in the app. It removes your account and everything stored with it straight away, including your connection to AwardWallet, your household membership and your activity history, and cancels any Premium subscription. If you signed in with Apple, it also withdraws our access to your Apple ID. Stripe keeps payment invoices where the law requires it.
You can also disconnect AwardWallet at any time in Settings, which removes the shared balances and keeps the rest of your account.
Privacy · Terms · Advertiser disclosure · How we value points · Photo credits · Home